miniblog.

Go has an os.Root API that allows you to enforce all paths are subdirectories of a given root. It fixes users accessing foo/../../../etc/passwd and similar. Seems like a really nice solution for a relatively common problem.

Programming languages aren't sports teams: you don't have to choose one to root for! They're more like music genres, you can enjoy more than one. I avoid language stickers for this reason. I don't want my identity to be "I'm an X programmer".

A patch to Chromium reduced global root DNS requests by 40%! https://www.theregister.com/2021/02/04/chromium_dns_traffic_drop/ It's also impressive how quickly users updated such that the global services saw a difference.